resolved: clear the AD bit for bypass packets
authorRonan Pigott <ronan@rjp.ie>
Mon, 26 Aug 2024 08:39:20 +0000 (01:39 -0700)
committerDaan De Meyer <daan.j.demeyer@gmail.com>
Tue, 10 Sep 2024 12:56:05 +0000 (14:56 +0200)
commit3a2be652282db2d55d5e28546e6c9a594fb8c43e
tree61aa556eb42d8ac96bdd0e42894780c6c1addb62
parent9b0415a5ad8be8ef1f004939fae74bee63d907ff
resolved: clear the AD bit for bypass packets

When the bypass logic is invoked, such as for queries to the stub with
the DO bit set, be certain to clear the AD bit in the reply before
forwarding it if the answer is not known to be authentic.

(cherry picked from commit 13e15dae9f0b4566d3ea2ed058a5dd44751216da)
src/resolve/resolved-dns-packet.h
src/resolve/resolved-dns-stub.c